CVE-2018-0743

Опубликовано: 04 янв. 2018

Источник: nvd

CVSS3: 7

CVSS2: 4.4

EPSS Низкий

Описание

Windows Subsystem for Linux in Windows 10 version 1703, Windows 10 version 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability".

Ссылки

http://www.securityfocus.com/bid/102350
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040094
Third Party Advisory
VDB Entry
https://github.com/saaramar/execve_exploit
Exploit
Patch
Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0743
Patch
Vendor Advisory
https://twitter.com/AmarSaar/status/948892321755598848
Third Party Advisory
https://www.exploit-db.com/exploits/43962/
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/102350
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040094
Third Party Advisory
VDB Entry
https://github.com/saaramar/execve_exploit
Exploit
Patch
Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0743
Patch
Vendor Advisory
https://twitter.com/AmarSaar/status/948892321755598848
Third Party Advisory
https://www.exploit-db.com/exploits/43962/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.0784

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-0743

CVSS3: 7

msrc

больше 7 лет назад

Windows Subsystem for Linux Elevation of Privilege Vulnerability

GHSA-hh9m-g5p9-8fw8

CVSS3: 7

github

около 3 лет назад

EPSS

Процентиль: 92%

0.0784

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo